1/5 



FIG. 1 (Prior Art) 
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User's computer accesses a vendor's web site; requests a transaction; 
and prepares to check out. 



The vendor prepares transaction information and requests 
the user's private information. 



User's computer obtains transaction information from the vendor's 
web server. 



User's computer obtains user indentifi cation information, 
including the user's secret key. 



310 User' s computer performs a MAC function on at least 

some of the transaction information and user identification 
information, using the user's secret key. 



The result of the MAC function is provided to the 
vendor as part of the requested private information. 



FIG. 4 




|The verifier's computer receives from the vendor via the private network the 
Isecure information, the transaction information, and user information that was 
'used to generate the secure information. 
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The verifier's computer uses t 
same MAC function on the tra 
received from the vendor and 
computer to generate the recei 


le user's secret key electronically to perform the 
xisaction information and user information 
that purportedly was used by the user's 
ved secure information. 



The verifier compares the results of the MAC function it performed with the | 
received secure information. L 



If the results of the MAC function are identical to the received secure 
information, the transaction is verified. 




